Deputy Manager | Assurance - Advisory | Delhi | Controls Assurance

JD for Controls Obligation

Location: Noida

• Manage contracts drafting and negotiations till final sign off of the contracts
• Effective contribution towards incorporating Supplier Control Obligations into supplier contracts
• Build remediation plan for non – compliances highlighted during Pre contract supplier assurance attestation reviews
• Performing annual basic ICT testing and advanced TLPT (Threat-Led Penetration Testing).
• Ensuring tests are conducted by independent parties and cover critical systems.
• Ensure the priority list of suppliers to be remediated is worked upon with top urgency and diligence, and that the management team/ stake holders are kept updated on a regular basis with progress, issues /concerns and findings
• Provide assistance to the other contract remediation / reviews and ad-hoc projects as appropriate
• Support development of reporting/ dashboards required for Senior Management

What will you be doing?

• Negotiate identified 3rd party risks on 3rd party engagement, discuss with Subject Matter Experts, Supplier Legal Counsels and Supplier Account Directors and escalate risks to Accountable Executives, if any and get the contract executed
• Ensuring contract compliance with key risks associated with 3rd party supplier engagement like Cyber & Information Security, Physical Security, People Screening, Operations Continuity, Health & safety and Data Protection etc.

Follow the defined process ensuring compliance with audit standards

• Develop and implement procedures for contract management and administration as may be required within the process
• Prepare contracts and change notes, addendums from standard template agreement(s)
• Send contracts to suppliers and liaison with suppliers to ensure closure of contracts within the timeline
• Ability to work with Global Risk Leads for deviations from the standard template agreement
• Complete the required documentation and follow-up actions for each deliverable until closure
• Ensure the process of contract completion and handover is diligently followed and recorded
• Ensure that the signed contracts are communicated to all relevant parties to provide contract visibility and awareness, interpretation to support
• Maintain an up to date, accurate Tracker and any other relevant records for governance; Maintain data and records as per policy and for audit purposes
• Provide regular status updates to stakeholders on the contract remediation that is in progress
• Conduct comprehensive Digital Operational Resilience Testing (annual tests, mandatory Threat-Led Penetration Testing for critical firms)
• Report progress against the Tracker and any risks, issues and dependencies following the defined processes
• Prepare and present weekly / monthly status dashboards to senior stakeholders
• Work on feedbacks from all Stakeholders including Sourcing Category Leads
• Ensure that all sourcing/supplier facing activity meets policy, compliance and audit requirements
• Other tasks applicable to the Job Purpose as requested

What we’re looking for:

• Masters or Graduate from a reputable Institute or University in Legal
• Reasonable years of commercial / procurement / legal/ risk management experience primarily handling contract reviews, negotiations and experience in drafting letters and amendments
• Reasonable understanding of key controls like Cyber Security, Information Security, Technology Risk, Data Privacy, Physical Security etc.
• Reasonable years of experience preferably in risk management, cyber & information security or supplier assurance and audits
• Proficient with Windows Operating Systems and excellent knowledge of MS Office (Word, Excel, PowerPoint)
• Should be experienced and an expert in being able to produce top quality dashboards for top management covering progress updates, including findings and issues or concerns as may be evident from time to time in PowerPoint and Excel
• Hands-on experience in contract management, risk management and legal
• Knowledge and understanding of sourcing/ procurement standard concepts and practices appropriate to the level of the role
• DORA testing including ICT risk management, reporting of major ICT-related incidents, digital operational resilience testing, information sharing and measures and requirements related to the use of ICT third-party services.

Skills that will help you in the role:

• Lawyer or equivalent with relevant years of experience in contract negotiation, supplier assurance and management and Risk Management
• The ideal candidate will also have appropriate knowledge and skills of contract, cyber security, commercial and risk management
• A relationship builder with a reputation for integrity, evoking rapid trust and confidence in clients, colleagues and team
• Ability to work with diversified and multiple layers of management